Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-09-2013
Ran by admin (administrator) on ADMIN-642E6E883 on 01-09-2013 18:45:06
Running from C:\Documents and Settings\admin\Pulpit
Microsoft Windows XP Home Edition Dodatek Service Pack 3 (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16126464 2007-04-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\Windows\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-18] (Adobe Systems Incorporated)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2013-05-25] (RealNetworks, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Run: [ALLUpdate] - C:\Program Files\ALLPlayer\ALLUpdate.exe [2995712 2013-04-14] (ALLPlayer Group Ltd.)
HKCU\...\Run: [Hoolapp Android] - "C:\DOCUME~1\admin\DANEAP~1\HOOLAP~1\Hoolapp.exe" /Minimized [x]
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x95000000

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=121845&tt=gc_&babsrc=HP_ss_gin2g&mntrId=F42390F652E7725E
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=6&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052}
SearchScopes: HKLM - DefaultScope {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
SearchScopes: HKLM - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052}
SearchScopes: HKCU - DefaultScope {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F42390F652E7725E&affID=119357&tsp=4992
SearchScopes: HKCU - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CICwrbWAiLMCFSTLtAodeB4ABA&ptb=DED01C81-4BC3-4521-8E76-59ACC45519C7&ind=2013042607&n=77fc97af&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll No File
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~1\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll No File
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU -&Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -&Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default
FF user.js: detected! => C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\user.js
FF NewTab: hxxp://home.sweetim.com/?src=97&barid={0194C1AE-063B-4CD7-97B1-E3B501FA4052}
FF Homepage: hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=F42390F652E7725E&affID=119357&tsp=4992
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=16.0.2.32 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.2.32 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\searchplugins\delta.xml
FF SearchPlugin: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\searchplugins\my-web-search.xml
FF SearchPlugin: C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF Extension: Battlefield Play4Free - C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\Extensions\battlefieldplay4free@ea.com
FF Extension: Delta Toolbar - C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\Extensions\ffxtlbr@delta.com
FF Extension: IplextoALL - C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: YouTubetoALL - C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi
FF Extension: No Name - C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Firefox\Profiles\ddv4ep1x.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\Documents and Settings\All Users\Dane aplikacji\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
S3 AppMgmt; %SystemRoot%\System32\appmgmts.dll [x]
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf" [x]

==================== Drivers (Whitelisted) ====================

R3 AR9271; C:\Windows\System32\DRIVERS\athuw.sys [1763584 2011-07-28] (Atheros Communications, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-27] ()
S3 AtcL001; C:\Windows\System32\DRIVERS\atl01_xp.sys [35840 2006-10-31] (Attansic Technology corporation.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 PCANDIS5; C:\WINDOWS\system32\PCANDIS5.SYS [16128 2003-08-04] (Printing Communications Assoc., Inc. (PCAUSA))
S4 IntelIde; No ImagePath
S3 PCAMPR5; \??\C:\WINDOWS\system32\PCAMPR5.SYS [x]
U1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-01 18:44 - 2013-09-01 18:44 - 00017764 _____ C:\Documents and Settings\admin\Pulpit\Extras.Txt
2013-09-01 18:44 - 2013-09-01 18:44 - 00000000 ____D C:\FRST
2013-09-01 18:43 - 2013-09-01 18:43 - 00065866 _____ C:\Documents and Settings\admin\Pulpit\OTL.Txt
2013-09-01 18:31 - 2013-09-01 18:24 - 01085571 _____ (Farbar) C:\Documents and Settings\admin\Pulpit\FRST.exe
2013-09-01 18:30 - 2013-09-01 18:24 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\admin\Pulpit\OTL.exe
2013-09-01 18:28 - 2013-09-01 18:28 - 00000000 ____D C:\Program Files\CCleaner
2013-09-01 18:25 - 2013-09-01 18:25 - 00000000 ____D C:\Program Files\Delta
2013-09-01 18:25 - 2013-09-01 18:25 - 00000000 ____D C:\Documents and Settings\admin\Dane aplikacji\BabSolution
2013-09-01 18:15 - 2013-09-01 18:15 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-01 18:14 - 2013-09-01 18:14 - 00263592 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-09-01 18:14 - 2013-09-01 18:14 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-09-01 18:14 - 2013-09-01 18:14 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-09-01 18:14 - 2013-09-01 18:14 - 00144896 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-09-01 17:48 - 2008-04-14 22:50 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidserv.dll
2013-09-01 17:48 - 2008-04-14 22:50 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidserv.dll
2013-09-01 17:48 - 2008-04-14 21:50 - 00014720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhid.sys
2013-09-01 17:48 - 2008-04-14 21:50 - 00014720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2013-09-01 17:48 - 2008-04-14 00:15 - 00032128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-09-01 17:48 - 2008-04-14 00:15 - 00032128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-08-17 14:09 - 2013-08-17 21:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-14 23:56 - 2013-08-14 23:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-14 23:56 - 2013-08-14 23:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-14 23:56 - 2013-08-14 23:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-14 23:55 - 2013-08-14 23:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$

==================== One Month Modified Files and Folders =======

2013-09-01 18:44 - 2013-09-01 18:44 - 00017764 _____ C:\Documents and Settings\admin\Pulpit\Extras.Txt
2013-09-01 18:44 - 2013-09-01 18:44 - 00000000 ____D C:\FRST
2013-09-01 18:44 - 2011-12-21 22:19 - 00000000 ____D C:\Documents and Settings\admin\Pulpit
2013-09-01 18:43 - 2013-09-01 18:43 - 00065866 _____ C:\Documents and Settings\admin\Pulpit\OTL.Txt
2013-09-01 18:33 - 2013-05-26 00:24 - 00065536 _____ C:\WINDOWS\system32\config\TuneUp.evt
2013-09-01 18:33 - 2012-10-18 19:47 - 00000000 ____D C:\WINDOWS\Minidump
2013-09-01 18:33 - 2012-09-06 11:18 - 00065536 _____ C:\WINDOWS\system32\config\Internet.evt
2013-09-01 18:33 - 2011-12-26 12:27 - 00000000 ____D C:\Documents and Settings\admin\Dane aplikacji\Skype
2013-09-01 18:33 - 2011-12-21 22:19 - 00000000 ___RD C:\Documents and Settings\admin\Menu Start\Programy\Autostart
2013-09-01 18:33 - 2011-12-21 22:19 - 00000000 ___HD C:\DOCUME~1\admin\USTAWI~1\Dane aplikacji
2013-09-01 18:33 - 2011-12-21 22:19 - 00000000 ____D C:\Documents and Settings\admin
2013-09-01 18:28 - 2013-09-01 18:28 - 00000000 ____D C:\Program Files\CCleaner
2013-09-01 18:28 - 2011-12-21 23:06 - 00000000 ____D C:\Documents and Settings\All Users\Pulpit
2013-09-01 18:26 - 2013-05-26 00:17 - 00000266 _____ C:\WINDOWS\Tasks\EPUpdater.job
2013-09-01 18:25 - 2013-09-01 18:25 - 00000000 ____D C:\Program Files\Delta
2013-09-01 18:25 - 2013-09-01 18:25 - 00000000 ____D C:\Documents and Settings\admin\Dane aplikacji\BabSolution
2013-09-01 18:25 - 2011-12-21 22:19 - 00000000 __RHD C:\Documents and Settings\admin\Dane aplikacji
2013-09-01 18:24 - 2013-09-01 18:31 - 01085571 _____ (Farbar) C:\Documents and Settings\admin\Pulpit\FRST.exe
2013-09-01 18:24 - 2013-09-01 18:30 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\admin\Pulpit\OTL.exe
2013-09-01 18:15 - 2013-09-01 18:15 - 00000000 ____D C:\Program Files\Common Files\Java
2013-09-01 18:15 - 2011-12-21 22:14 - 01193602 ____N C:\WINDOWS\WindowsUpdate.log
2013-09-01 18:14 - 2013-09-01 18:14 - 00263592 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2013-09-01 18:14 - 2013-09-01 18:14 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2013-09-01 18:14 - 2013-09-01 18:14 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2013-09-01 18:14 - 2013-09-01 18:14 - 00144896 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2013-09-01 18:14 - 2013-05-11 14:53 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-09-01 18:14 - 2012-07-26 20:38 - 00867240 _____ (Oracle Corporation) C:\WINDOWS\system32\npDeployJava1.dll
2013-09-01 18:14 - 2012-07-21 14:35 - 00789416 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2013-09-01 18:14 - 2011-12-21 22:35 - 00000000 ____D C:\Program Files\Java
2013-09-01 18:13 - 2011-12-21 22:53 - 00000000 ____D C:\Documents and Settings\admin\Moje dokumenty\Pobieranie
2013-09-01 18:13 - 2011-12-21 22:19 - 00000000 ___RD C:\Documents and Settings\admin\Moje dokumenty
2013-09-01 18:05 - 2013-05-26 00:22 - 00000000 ____D C:\Documents and Settings\admin\Dane aplikacji\NapiProjekt
2013-09-01 17:55 - 2012-07-21 14:49 - 00000000 ____D C:\Documents and Settings\admin\Dane aplikacji\GG
2013-09-01 17:55 - 2011-12-21 22:19 - 00000000 ___RD C:\Documents and Settings\admin\Menu Start\Programy
2013-09-01 17:48 - 2013-05-11 14:59 - 00000362 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-09-01 17:47 - 2013-08-01 07:22 - 00000278 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1547161642-2025429265-682003330-1004.job
2013-09-01 17:47 - 2011-12-21 23:09 - 00000157 ____C C:\WINDOWS\wiadebug.log
2013-09-01 17:47 - 2011-12-21 23:09 - 00000050 ____C C:\WINDOWS\wiaservc.log
2013-09-01 17:47 - 2011-12-21 22:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-01 17:47 - 2008-04-15 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2013-08-21 18:32 - 2011-12-21 22:18 - 00032388 ____N C:\WINDOWS\SchedLgU.Txt
2013-08-21 17:37 - 2013-04-24 15:18 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-17 22:16 - 2011-12-21 22:19 - 00000188 ___SH C:\Documents and Settings\admin\ntuser.ini
2013-08-17 21:25 - 2013-08-17 14:09 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-14 23:58 - 2013-07-21 13:18 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-14 23:58 - 2012-09-06 11:19 - 00000000 ____D C:\WINDOWS\ie8updates
2013-08-14 23:56 - 2013-08-14 23:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-14 23:56 - 2013-08-14 23:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-14 23:56 - 2013-08-14 23:56 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-14 23:56 - 2011-12-23 22:32 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-08-14 23:56 - 2011-12-23 16:23 - 00024084 _____ C:\WINDOWS\system32\TZLog.log
2013-08-14 23:55 - 2013-08-14 23:55 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-12 14:47 - 2013-05-25 23:56 - 00000286 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1547161642-2025429265-682003330-1004.job
2013-08-05 11:52 - 2011-12-21 23:04 - 00000000 __RHD C:\Documents and Settings\All Users\Dane aplikacji
2013-08-04 11:40 - 2011-12-21 23:06 - 00764922 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-04 11:40 - 2008-04-15 14:00 - 00356174 _____ C:\WINDOWS\system32\perfh015.dat
2013-08-04 11:40 - 2008-04-15 14:00 - 00049932 _____ C:\WINDOWS\system32\perfc015.dat

Files to move or delete:
====================
C:\DOCUME~1\admin\USTAWI~1\Temp\APNStub.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ggdrive-menu.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ggdrive-overlay.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ICReinstall_PDFReaderSetup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ICReinstall_Real_Alternative_Downloader.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\installstats.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\install_flashplayer11x32_mssa_aih(1).exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ipl1E7.tmp.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ipl2C7.tmp.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ipl2C9.tmp.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\iplAA.tmp.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\lowproc.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\nsu43A.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\setup_fsu_cid.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\Shortcut_sweetimsetup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\SIMEEI2Installer.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\SIMEEIInstaller.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\SkypeSetup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\SQLite.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\stubhelper.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\swt-win32-3349.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\t.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\TUUUninstallHelper.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\uninst1.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\{397E31AA-0D78-4649-A01C-339D73A2ED35}_NSS_8273.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\~rnsetup\GEMSETUP\msvcr100.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\~rnsetup\GEMSETUP\pnrs3260.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\~nsu.tmp\Au_.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\_MEI31042\kernel32.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\_MEI31042\psapi.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\_MEI31042\shell32.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\www.minecraft.net\Minecraft\natives\jinput-dx8.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\www.minecraft.net\Minecraft\natives\jinput-raw.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\www.minecraft.net\Minecraft\natives\lwjgl.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\www.minecraft.net\Minecraft\natives\lwjgl64.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\www.minecraft.net\Minecraft\natives\OpenAL32.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\www.minecraft.net\Minecraft\natives\OpenAL64.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\SPI\unzip.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\SPI\Files\Softs\MyBabylonTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\nst492.tmp\Time.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\nss48D.tmp\Time.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\nse494.tmp\Time.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\MSS\3.0.318.3\mcbrwsr2.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\MSS\3.0.318.3\McInstallerRes.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\MSS\3.0.318.3\McInstallerRes_LD.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\MSS\3.0.318.3\McInstallerStartup.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\MSS\3.0.318.3\McUICnt.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\MSS\3.0.318.3\SecurityScanner.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\isp5.tmp\_Setup.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\isp3F.tmp\_Setup.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\is1890775716\2318871_Setup.EXE
C:\DOCUME~1\admin\USTAWI~1\Temp\is1890775716\4617295_Setup.EXE
C:\DOCUME~1\admin\USTAWI~1\Temp\is1890775716\DeltaTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\is1095167443\5611390_Setup.EXE
C:\DOCUME~1\admin\USTAWI~1\Temp\is1095167443\DeltaTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\is-M2S8O.tmp\_isetup\_shfoldr.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\is-BMOV7.tmp\napiprojekt.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\ipla_tmp\codecpack.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\BabMaint.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\BUSolForMontiera.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\BUSolution.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\ccp.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\ChromeToolbarSetup.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\CrxInstaller.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\enhancedNT.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\GUninstaller.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\IEHelper.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\MntrDLLInstall.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\MyDeltaTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\FB1A59BC-BAB0-7891-AB5C-868BB98E69A7\Latest\sqlite3.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\CRX_DF399A9B283A\ChromeRecovery.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\CRX_DF399A9B283A\GoogleUpdateSetup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\bus45D\BUSolution.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\IECookieLow.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\reslib.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\sqlite3.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\IECookieLow.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\IEHelper.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\MyBabylonTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\reslib.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\BE293B27-BAB0-7891-B67F-C2A35010CD34\Latest\sqlite3.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ffx.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ie.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\B.dir\InstallFlashPlayer.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\IEHelper.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\sqlite3.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\Latest\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\Latest\IEHelper.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\Latest\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\8504C365-BAB0-7891-ACAB-E0E738D7ABA8\Latest\sqlite3.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\4D2A76E1-BAB0-7891-A6C4-4A45C96268BB\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\4D2A76E1-BAB0-7891-A6C4-4A45C96268BB\IECookieLow.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\4D2A76E1-BAB0-7891-A6C4-4A45C96268BB\MyBabylonTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\4D2A76E1-BAB0-7891-A6C4-4A45C96268BB\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\4D2A76E1-BAB0-7891-A6C4-4A45C96268BB\sqlite3.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\BabMaint.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\BExternal.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\BUSolForMontiera.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\BUSolution.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\ccp.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\ChromeToolbarSetup.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\CrxInstaller.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\GUninstaller.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\IEHelper.dll
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\MyBabylonTB.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\Setup.exe
C:\DOCUME~1\admin\USTAWI~1\Temp\2EC0F9A2-BAB0-7891-872D-283541F37E7B\Latest\sqlite3.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 1035264 ____A (Microsoft Corporation) c791ed9eac5e76d9525e157b1d7a599a 

C:\Windows\System32\winlogon.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 0510464 ____A (Microsoft Corporation) 51fd2e13d723857b9ca239ae77150f48 

C:\Windows\System32\svchost.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 0014336 ____A (Microsoft Corporation) 8607d35d92528e2df386f19a960d23ce 

C:\Windows\System32\services.exe
[2008-04-15 14:00] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 02a467e27af55f7064c5b251e587315f 

C:\Windows\System32\User32.dll
[2008-04-15 14:00] - [2008-04-15 14:00] - 0580096 ____A (Microsoft Corporation) a435c5c069afd901751ac323ad238793 

C:\Windows\System32\userinit.exe
[2008-04-15 14:00] - [2008-04-15 14:00] - 0026624 ____A (Microsoft Corporation) 2a5b37d520508be6570a3ea79695f5b5 

C:\Windows\System32\Drivers\volsnap.sys
[2008-04-15 14:00] - [2008-04-15 14:00] - 0052864 ____A (Microsoft Corporation) 56b191ac5fc0df219949c95a6c87afe7 


==================== End Of Log ============================